1. Conduid
  2. Agents
  3. CatalogLock
MCP server · Agents

CatalogLock

· github.com/BryanFiFife/CatalogLock

Security gate and deterministic lockfile for Agentic Resource Discovery (ARD) catalogs. Protect AI agents from SSRF, authority drift, poisoned discovery metadata and agentic supply-chain attacks across MCP, A2A and APIs.

Unclaimed a2aagent-securityagentic-aiagentic-resource-discoveryai-agentsai-catalogai-securitycybersecuritydevsecopsdns-rebindinggithub-actionlockfilemcpmodel-context-protocolsarifssrfsupply-chain-securitytrusttypescript
InstallView source
34Low

Scored 7 hours ago · breakdown

About CatalogLock

CatalogLock is an MCP server in the Agents category: security gate and deterministic lockfile for Agentic Resource Discovery (ARD) catalogs. Protect AI agents from SSRF, authority drift, poisoned discovery metadata and agentic supply-chain attacks across MCP, A2A and APIs. It has been installed 0 times through Conduid.

Install

Clone
git clone https://github.com/BryanFiFife/CatalogLock

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about CatalogLock

Powered by Claude · Grounded in docs

I know everything about CatalogLock. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • ·Scoped permissionsNot checked yet.
Questions

About CatalogLock

How do I install CatalogLock?

Run git clone https://github.com/BryanFiFife/CatalogLock, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is CatalogLock safe to use with an AI agent?

Its trust score is 34 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is CatalogLock still maintained?

Conduid hasn't recorded a commit date for this repository yet. Check the repository directly for recent activity.